PKI Sr. Analyst - SME

PepsiCo; Makati; On-site; PHP 1,800,000 - 2,800,000; Full time

Job summary

PepsiCo seeks a senior PKI and certificate lifecycle leader in the Metro Manila area to own end-to-end digital certificate services across EKCM, PKI, and HSM. You will drive security-aligned design, integration with applications, and operations across global regions.

You will mentor teams, ensure SLAs, implement automation, and educate stakeholders on lifecycle processes. 8+ years IT with PKI, cloud, and scripting expertise preferred.

Qualifications

• BS/BTech in Engineering.
• 8+ years of overall IT experience.
• 6+ years of Security experience.
• 7+ years of PKI, EKCLM, and NHI management experience.
• 7+ years of PowerShell scripting experience.
• 5+ years of experience with cloud platforms (Azure, AWS).
• 5+ years of API development and integration experience.
• Knowledge of cryptographic and modern auth protocols.
• Familiarity with PKI tooling and AD CS.
• ITSM processes such as request, incident, change management.

Responsibilities

• Lead the digital certificate services space using PKI, EKCM, and HSM solutions for global PepsiCo.
• Drive technical discussions with application teams to define certificate service requirements.
• Ensure services align with PepsiCo security standards and industry best practices.
• Manage engineering and operations teams, mentor juniors, and meet SLAs.
• Design end-to-end certificate services for new integrations and projects.
• Drive automation for provisioning and monitoring of certificates.
• Maintain high availability and disaster recovery across regions.
• Educate stakeholders on certificate lifecycle processes and procedures.
• Lead incident management for certificate services and drive RCAs.

Skills

PKI expertise

EKCLM / NHI mgmt

PowerShell scripting

Cloud platforms (Azure, AWS)

API development & integration

Security standards

Certificate lifecycle management

HSM management

Active Directory / AD CS

ITSM processes (request, incident, CM)

Education

BS/BTech in Engineering

Tools

Venafi

AppviewX

Keyfactor

Thales HSM

Public CA

Azure

AWS

Job description

Overview

This role will be responsible for managing end-to-end digital certificate and lifecycle management solutions across all supporting components. The role includes Engineering, Integrations, Operations, and maintenance of the global PKI and NHI environment, ensuring alignment with industry standards and best practices.

Responsibilities

At PepsiCo, you'll find the opportunity to grow your career, make an impact, and help shape what's next. As one of the world's leading food and beverage companies, our beloved brands—including Gatorade, Lay's, and Quaker—help create smiles with every sip and bite. Behind our products is a connected system that starts with how we source and grow ingredients alongside farmers and extends to how we make, move, and deliver products while driving positive impact for our business and communities.

Responsibilities

• Lead the digital certificate services space, a digital form of identification where consumers, businesses and organizations can exchange data securely, using public key infrastructure (PKI), Enterprise Key and Certificate Lifecycle management (EKCM), Hardware Security Modules (HSM) solutions for global PepsiCo.


• Drive technical discussions to understand digital certificate services requirements while partnering with application teams who design and implement solutions.


• Ensure digital certificate services provided align with PepsiCo’s security standards and align with industry best practices.


• Manage the engineering and operations teams (people and work) for digital certificate services by mentoring junior members, ensuring SLAs are met, and ensuring tasks are properly completed.


• Manage the certificate services space end-to-end from designing solutions for services for new integrations and patterns, to implementing projects in the certificate services space, and providing sustained support across all products in the certificate services space.


• Drive automation initiatives for certificate services including certificate provisioning and monitoring for digital certificate services by identifying opportunities for enhancements and implementation with no issues.


• Maintain and enhance global solutions for the digital certificate area ensuring high availability and disaster recovery across regions with resiliency including planning and delivering upgrades.


• Provide guidance, educate key stakeholders on certificate life cycle processes and procedures.


• Lead incident management for digital certificate services across the solution stack driving root cause and resolution within service level agreement.

Qualifications

Technical Requirements

• BS/BTech in Engineering


• 8+ years of overall IT experience


• 6+ years of Security experience


• 7+ years of PKI, EKCLM, and NHI Management experience


• 7+ years of PowerShell scripting experience


• 5+ years of experience with cloud platforms (Azure, AWS)


• 5+ years of API development and integration experience


• Good working knowledge of cryptographic and modern auth protocols


• Well versed with Certificate based authentication and device trust


• Well versed with Non-Human Identity management


• In depth knowledge of Active Directory Certificate Services (AD CS)


• In depth knowledge of CRL and OCSP and their functionality


• Familiarity with PKI and cryptographic terminology and management


• Knowledge of CLM tool such as Venafi, AppviewX, Keyfactor added advantage


• Hands on experience and Working knowledge of Thales HSM


• Hands on experience and working knowledge of public CA


• Good working knowledge of cloud platforms (Azure and AWS) and SaaS offerings for PKI and EKCLM


• Knowledge of Active Directory domain service


• Knowledge of scripting languages such as PowerShell, API based automation


• Knowledge of ITSM processes like request, incident, change management etc.

Non-technical requirements

• Strong oral and written communications skills


• Ability to work within project timelines


• Deliver outcomes with a little supervision, must be a self-starter and self-motivator


• Proactive approach and enthusiasm for problem identification and solving


• Ability to think strategically and suggest creative solutions


• Ability to synthesize complex requirements into simple business practices


• Flexible and able to adapt to changing priorities

At the heart of PepsiCo are our people: professionals who bring curiosity, drive, and fresh thinking, working together to turn ideas into action. Across functions, teams, and markets, we collaborate to solve challenges, unlock new opportunities, and create meaningful impact for our consumers, customers, and communities.

No matter your role, you'll be part of a connected community where your contributions matter, your voice is heard, and your development is supported. With opportunities to grow, belong, and smile, PepsiCo offers more than a place to build your career—it offers the chance to help create what's next.